Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/EdBN_vk8izO0h8Rs0xmtbGc0T30.roa
File: EdBN_vk8izO0h8Rs0xmtbGc0T30.roa (raw, json)
Hash identifier: IjdSIqXqftvE6ncR/fGeOjjGVHP1jV98TSlFHBJ67EM=
Subject key identifier: 11:D0:4D:FE:F9:3C:8B:33:B4:87:C4:6C:D3:19:AD:6C:67:34:4F:7D
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 01856D0A9ED457C6DB58F2D4E67BC662F39D
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/EdBN_vk8izO0h8Rs0xmtbGc0T30.roa
Signing time: Sun 01 Jan 2023 11:14:50 +0000
ROA not before: Sun 01 Jan 2023 11:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12777
IP address blocks: 193.255.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:9e:d4:57:c6:db:58:f2:d4:e6:7b:c6:62:f3:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 1 11:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11d04dfef93c8b33b487c46cd319ad6c67344f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fd:e3:7a:9a:b0:b8:cc:0b:ed:92:78:33:13:
f9:58:12:61:04:24:66:4b:10:8c:35:3e:9d:1a:62:
a2:ad:8f:33:c9:0e:df:c5:9c:2a:20:dd:fa:af:f0:
2a:28:46:18:7c:08:1f:3f:cb:53:9b:c0:cf:04:6e:
04:33:26:ad:c1:be:1e:a1:0b:88:de:f2:7d:06:bf:
29:d6:3a:7f:8d:fb:a1:5b:45:b5:81:a9:da:01:b1:
53:05:f3:41:b2:11:01:d1:a0:a1:24:1c:5c:d0:60:
12:57:1a:26:f4:56:ec:13:7a:30:60:07:1f:55:01:
69:f3:14:1d:bf:64:22:5a:4b:d7:6e:fb:68:7d:e9:
29:05:f0:76:19:9c:54:ec:a7:b0:76:42:5b:84:fb:
01:f4:b1:6f:6f:56:95:49:1e:98:01:c4:35:25:e9:
10:43:4c:35:a2:e5:e0:09:da:09:d2:ba:38:0b:54:
c4:4d:ec:f4:ea:f1:0a:37:33:2b:c8:bc:9f:78:15:
13:e5:91:26:eb:86:cf:84:61:6b:00:d6:c6:cd:e2:
5b:e2:63:f3:25:8a:5d:42:f2:eb:36:77:cf:17:35:
3c:02:70:3a:d2:3a:70:ac:e8:cd:ba:2b:b2:0a:98:
ab:46:ec:8e:8e:82:e0:49:cc:0a:d4:4a:78:b4:ec:
7c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D0:4D:FE:F9:3C:8B:33:B4:87:C4:6C:D3:19:AD:6C:67:34:4F:7D
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/EdBN_vk8izO0h8Rs0xmtbGc0T30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.255.44.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:d2:64:3b:cb:39:d9:d9:d6:cb:31:2c:e2:96:96:49:d1:e3:
8d:92:24:4d:f2:c9:01:b0:08:61:6c:1a:9d:54:0f:81:e4:61:
6a:64:24:63:b4:a6:5e:22:48:6c:01:22:e5:40:73:f8:3a:f6:
53:59:0b:10:e5:ba:d7:f0:4a:d4:ad:8b:e3:71:7b:23:32:04:
94:9a:35:86:99:d0:1a:7c:20:8d:63:0b:dd:f8:c0:23:12:8f:
c7:99:bd:11:56:92:25:40:8b:d7:d8:48:09:ab:4f:1f:8b:7d:
cb:6c:01:52:0e:d5:6a:bc:e5:75:d8:06:ae:e1:80:df:81:78:
54:f7:ab:13:d1:16:af:37:ba:60:30:e1:10:90:97:ce:08:44:
c1:4a:04:22:8b:0d:00:77:02:c7:cc:f7:4f:05:68:40:63:89:
4f:1b:41:df:14:e9:4c:89:d5:ef:b9:5e:3b:d6:71:d2:c8:d2:
68:38:8f:01:d2:93:7b:3f:8d:75:5a:86:12:b0:f9:17:75:97:
35:a5:d2:dd:4d:0e:63:09:1e:3d:c3:5c:12:c7:43:21:0f:4a:
58:8d:96:50:0d:55:38:fa:7a:67:dc:c5:0e:1c:2a:f3:f2:e3:
af:4d:0a:6e:5e:f6:24:eb:f2:6b:0c:75:4c:2f:fa:ad:3c:9b:
2c:34:eb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:39 2024 by rpki-client on console-fra.rpki-client.org